Privacy

1. What we collect

• Account: your name, your email address and a scrambled (hashed) version of your password. We cannot read your password.
• Orders: which events you bought or reserved tickets for, how many, what you paid, donations, refunds and transfers. If you buy without an account, the name on the ticket and the email you or Stripe gave us, used only to send you the ticket and to reach you about that show.
• The door: when and at which door your ticket was scanned, and whether it was admitted or refused.
• Things you choose to do: acts you follow, waitlists you join, free ticket offers you accept or pass on.
• Technical: one sign-in cookie that keeps you logged in, and standard server logs (IP address, browser type, the page asked for) kept by our hosting provider for security and troubleshooting.

We do not collect or store your card number. Card details go straight to Stripe. We do not collect your precise location, contacts, or anything from your phone beyond what you type.

2. What we use it for

• Selling and delivering your ticket and letting you in.
• Email about your order: the ticket link, a waitlist call, a change or cancellation, a refund.
• Free ticket offers to people who have bought tickets before. You can turn these off from the link in any offer email or by writing to us.
• Settling the show: counting what sold so the bands, the venue and the agency are paid correctly.
• Keeping the site secure and stopping fraud and ticket copying.
• Records we are required to keep for tax and accounting.

We do not send general marketing email and we do not build advertising profiles.

3. Who sees it

• The event’s presenter and venue see the names on the door list and sales totals for their own show, so they can run the door and settle the night.
• Artists see counts and money for their own shows. They do not see your name or email. Following an act tells the act a number, not who you are.
• Stripe processes payments and payouts. Google Workspace sends our email. Railway hosts the site and Turso hosts the database. Each only handles data to provide that service to us.
• Law enforcement or a court, when the law requires it.

We do not sell, rent or trade personal information, and we do not share it for advertising.

4. Cookies

One cookie, set when you sign in, that keeps you signed in. It is essential to the site working, it is not readable by scripts, and it is not used to track you anywhere else.

A second cookie remembers which link brought you to a show page (for example the show's ad, Facebook, or a band's own link) for up to seven days, so the show can see which of its links sold tickets. It holds one word, no personal information, is only ever read by this site when you buy a ticket, and is stored with your order. There are no advertising or analytics cookies from anyone else, so there is no cookie banner to click through.

5. How long we keep it

• Your account: until you ask us to delete it.
• Order and payment records: seven years, because tax and accounting rules require it.
• Door scan records: two years, then deleted or stripped of names.
• Server logs: as long as our hosting provider keeps them, typically thirty days or less.

6. Your choices and how to delete your data

Write to grant.loudandheavybooking@gmail.com from the email on your account or your order and ask for a copy of your data, a correction, or deletion. We answer within thirty days. When you ask for deletion we remove your account and personal details, and keep only the order records the law requires, with your name and email removed where we can.

Residents of Texas, California and other states with privacy laws have the right to know, correct, delete and get a copy of their personal data, and the right not to be treated differently for asking. We extend those rights to everyone.

7. Children

The site is not directed to children under 13 and we do not knowingly collect their information. If you believe a child under 13 has made an account, write to us and we will delete it. People under 18 should have a parent or guardian buy their ticket.

8. Security

Passwords are hashed, connections are encrypted, payment details never touch our servers, and each account type can only see its own shows and its own money. No system is perfectly secure. If there is ever a breach involving your information we will tell you as the law requires.

9. Changes and contact

If this policy changes in a way that matters, the date at the top changes and we will say so on the site. Questions and requests: grant.loudandheavybooking@gmail.com, or 5THN Music LLC, 818 SW 7th Avenue, Amarillo, TX 79101.